Blue team · DFIR · Malware analysis
Field notes from incident response and malware analysis
Walkthroughs written the way you'd explain them at a whiteboard: the tool, the API, the offset, then why it matters for detection. Every post ends with something to solve.